3 ms·
It is likely infected and is renting residential IP to web scraping companies.
by coolspot 6y ago
It is likely infected and is renting residential IP to web scraping companies.
- viraptor 6y agoHave you got any references for it, or is it a random guess?
- rcxdude 6y agoRelatively unlikely in this case because from the description is seems all the traffic is to/from one EC2 IP address.
- coolspot 6y agoEC2 instance is an aggregator’s proxy or scraping backend itself. Ah, wait, I just realized it can’t be if there is no any traffic other than AWS.
- londons_explore 6y agoI assune the attacker doesn't own that EC2 instance. If they did, the bandwidth costs would be prohibitive (there is no economic reason to pay XX cents per GB to send data to a tiny remote CPU for processing)